dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/host/extended-adapters.js

@@ -0,0 +1,207 @@
+import { fileURLToPath } from 'node:url';
+import { mkdirSync, lstatSync, chmodSync, realpathSync, mkdtempSync, rmSync, readdirSync, openSync, closeSync, fstatSync, fchmodSync, constants, } from 'node:fs';
+import { join } from 'node:path';
+import { homedir, tmpdir } from 'node:os';
+import { prepareZCode, discoverZCode, zcodeAuthDirectory } from "./zcode-adapter.js";
+import { preparePiOmp, discoverPiOmp } from "./pi-omp-adapter.js";
+import { prepareOpenCode, discoverOpenCode, openCodeAuthDirectory } from "./opencode-adapter.js";
+import { prepareHermes, discoverHermes } from "./hermes-adapter.js";
+import { effectiveHermesHome } from "./hermes-account-context.js";
+import { prepareGrok, discoverGrok } from "./grok-adapter.js";
+export const EXTENDED_CLIS = ['zcode', 'grok', 'omp', 'pi', 'hermes', 'opencode'];
+export const isExtendedCli = (cli) => EXTENDED_CLIS.includes(cli);
+const privateArgv = (argv) => [
+    process.execPath,
+    fileURLToPath(new URL('./private-launch.mjs', import.meta.url)),
+    ...argv,
+];
+export function privateDirectory(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    if (lstatSync(path).isSymbolicLink())
+        throw new Error('CLI state directory cannot be a symlink');
+    chmodSync(path, 0o700);
+    return realpathSync(path);
+}
+/**
+ * Run only after the native process range has exited. Copies can preserve public
+ * modes despite umask. Pin each inode before changing it, skip symlinks, and fail
+ * closed on hard links rather than chmod a possibly external file.
+ */
+export function sealPrivateTree(root) {
+    const sameInode = (a, b) => a.dev === b.dev && a.ino === b.ino;
+    const ancestors = [];
+    const assertLocations = () => {
+        for (const { path, info } of ancestors) {
+            const current = lstatSync(path);
+            if (current.isSymbolicLink() || !sameInode(current, info))
+                throw new Error('CLI private state changed during permission cleanup');
+        }
+    };
+    const visit = (path) => {
+        assertLocations();
+        const info = lstatSync(path);
+        if (info.isSymbolicLink() || (!info.isDirectory() && !info.isFile()))
+            return;
+        if (info.isDirectory() && process.platform === 'win32') {
+            // Windows does not support opening directories with POSIX O_DIRECTORY.
+            // Keep the same location/inode checks without widening to linked targets.
+            const canonical = realpathSync(path);
+            ancestors.push({ path, info });
+            try {
+                assertLocations();
+                if (realpathSync(path) !== canonical)
+                    throw new Error('CLI private state changed during permission cleanup');
+                chmodSync(path, 0o700);
+                for (const entry of readdirSync(path))
+                    visit(join(path, entry));
+                assertLocations();
+                if (realpathSync(path) !== canonical)
+                    throw new Error('CLI private state changed during permission cleanup');
+            }
+            finally {
+                ancestors.pop();
+            }
+            return;
+        }
+        const fd = openSync(path, constants.O_RDONLY |
+            constants.O_NOFOLLOW |
+            constants.O_NONBLOCK |
+            (info.isDirectory() ? constants.O_DIRECTORY : 0));
+        try {
+            const opened = fstatSync(fd);
+            if (!sameInode(info, opened) || info.isDirectory() !== opened.isDirectory())
+                throw new Error('CLI private state inode changed during permission cleanup');
+            ancestors.push({ path, info: opened });
+            try {
+                assertLocations();
+                if (opened.isFile() && fstatSync(fd).nlink !== 1)
+                    throw new Error('CLI private state contains a hard-linked file; permissions were not changed');
+                fchmodSync(fd, opened.isDirectory() ? 0o700 : 0o600);
+                if (opened.isDirectory())
+                    for (const entry of readdirSync(path))
+                        visit(join(path, entry));
+            }
+            finally {
+                ancestors.pop();
+            }
+        }
+        finally {
+            closeSync(fd);
+        }
+    };
+    visit(root);
+}
+/** Compatibility only: Host credential references never supply CLI accounts. */
+export async function credentialEnvironment(_cli, _config, _selectedModel) {
+    return {};
+}
+export async function extendedLaunch(cli, executable, project, preference, mode, prompt, stateDirectory, config, conversationId, metadataCapture, renewal) {
+    const state = privateDirectory(stateDirectory);
+    const input = { executable, project, preference, mode, prompt, conversationId, stateDirectory: state };
+    const metadata = metadataCapture &&
+        ((argv, env, phase, scope) => metadataCapture(privateArgv(argv), { ...env, ELECTRON_RUN_AS_NODE: '1' }, phase, scope));
+    const launch = cli === 'zcode'
+        ? await prepareZCode({
+            ...input,
+            authDirectory: zcodeAuthDirectory(config.zcodeAuthDirectory, config.stateDirectory),
+            builtinConfig: config.zcodeBuiltinConfig,
+        })
+        : cli === 'pi' || cli === 'omp'
+            ? await preparePiOmp({
+                ...input,
+                cli,
+                accountRoot: config.stateDirectory ??
+                    join(process.env.DSH_HOME ?? join(homedir(), '.dsh'), 'cliworker-now'),
+            }, metadata)
+            : cli === 'opencode'
+                ? await prepareOpenCode({
+                    ...input,
+                    authDirectory: openCodeAuthDirectory(config.stateDirectory),
+                })
+                : cli === 'hermes'
+                    ? await prepareHermes({ ...input, hermesHome: effectiveHermesHome(config), renewal })
+                    : cli === 'grok'
+                        ? await prepareGrok(input)
+                        : undefined;
+    if (!launch)
+        throw new Error('未知 CLI');
+    const temporary = cli === 'zcode' ? mkdtempSync(join(tmpdir(), 'cwn-')) : undefined;
+    if (temporary)
+        chmodSync(temporary, 0o700);
+    const env = {
+        ...launch.env,
+        ...(temporary ? { TMPDIR: temporary, TMP: temporary, TEMP: temporary } : {}),
+        ELECTRON_RUN_AS_NODE: '1',
+    };
+    try {
+        const argv = privateArgv(launch.argv);
+        return {
+            argv,
+            env,
+            ...('activate' in launch && launch.activate ? { activate: launch.activate } : {}),
+            cleanup: async () => {
+                try {
+                    if ('cleanup' in launch && launch.cleanup)
+                        await launch.cleanup();
+                    sealPrivateTree(state);
+                }
+                finally {
+                    if (temporary)
+                        rmSync(temporary, { recursive: true, force: true });
+                }
+            },
+        };
+    }
+    catch (error) {
+        if ('cleanup' in launch && launch.cleanup)
+            await launch.cleanup();
+        if (temporary)
+            rmSync(temporary, { recursive: true, force: true });
+        throw error;
+    }
+}
+export async function extendedCatalog(cli, executable, capture, stateDirectory, config, signal, renewal) {
+    signal?.throwIfAborted();
+    const catalogRoot = privateDirectory(join(stateDirectory, 'catalog', cli));
+    const state = privateDirectory(mkdtempSync(join(catalogRoot, 'query-')));
+    const run = async (argv, env) => {
+        const temporary = cli === 'zcode' ? mkdtempSync(join(tmpdir(), 'cwn-')) : undefined;
+        if (temporary)
+            chmodSync(temporary, 0o700);
+        try {
+            return await capture(privateArgv(argv), {
+                ...env,
+                ...(temporary ? { TMPDIR: temporary, TMP: temporary, TEMP: temporary } : {}),
+                ELECTRON_RUN_AS_NODE: '1',
+            });
+        }
+        finally {
+            if (temporary)
+                rmSync(temporary, { recursive: true, force: true });
+        }
+    };
+    const models = cli === 'zcode'
+        ? await discoverZCode(executable, run, state, zcodeAuthDirectory(config.zcodeAuthDirectory, config.stateDirectory ?? stateDirectory), config.zcodeBuiltinConfig, { signal })
+        : cli === 'pi' || cli === 'omp'
+            ? await discoverPiOmp(cli, executable, run, state, {
+                accountRoot: config.stateDirectory ?? stateDirectory,
+                signal,
+            })
+            : cli === 'opencode'
+                ? await discoverOpenCode(executable, run, state, openCodeAuthDirectory(config.stateDirectory ?? stateDirectory), false, { signal })
+                : cli === 'hermes'
+                    ? await discoverHermes(executable, run, state, effectiveHermesHome({ ...config, stateDirectory: config.stateDirectory ?? stateDirectory }), { signal, renewal })
+                    : cli === 'grok'
+                        ? await discoverGrok(executable, run, state, { signal })
+                        : undefined;
+    if (!models)
+        throw new Error('未知 CLI');
+    signal?.throwIfAborted();
+    // A successful capture has confirmed that its process range exited. Only
+    // model values leave this operation; its private snapshots and native caches
+    // are no longer needed. Rejected captures keep their potentially live files.
+    sealPrivateTree(state);
+    rmSync(state, { recursive: true, force: true });
+    return models;
+}
+//# sourceMappingURL=extended-adapters.js.map

package/lib/types/host/extended-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extended-adapters.js","sourceRoot":"","sources":["../../../src/host/extended-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,MAAM,EACN,WAAW,EACX,QAAQ,EACR,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,GAEV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAGzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAA6B,MAAM,qBAAqB,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAChG,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAG7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAA;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAyC,EAAE,CACjF,aAAmC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AACpD,MAAM,WAAW,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC;IACtC,OAAO,CAAC,QAAQ;IAChB,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,GAAG,IAAI;CACR,CAAA;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAChG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,SAAS,GAAG,CAAC,CAAQ,EAAE,CAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAA;IAC5E,MAAM,SAAS,GAAoC,EAAE,CAAA;IACrD,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,eAAe,EAAE,CAAA;QACjB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAE,OAAM;QAC5E,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvD,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACpC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC9B,IAAI,CAAC;gBACH,eAAe,EAAE,CAAA;gBACjB,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS;oBAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;gBACxE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBACtB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;gBAC/D,eAAe,EAAE,CAAA;gBACjB,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,SAAS;oBAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YAC1E,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,GAAG,EAAE,CAAA;YACjB,CAAC;YACD,OAAM;QACR,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CACjB,IAAI,EACJ,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,UAAU;YACpB,SAAS,CAAC,UAAU;YACpB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CACnD,CAAA;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE;gBACzE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YAC9E,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtC,IAAI,CAAC;gBACH,eAAe,EAAE,CAAA;gBACjB,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;gBAChG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBACpD,IAAI,MAAM,CAAC,WAAW,EAAE;oBAAE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;YAC3F,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,GAAG,EAAE,CAAA;YACjB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,CAAA;AACb,CAAC;AACD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAW,EACX,OAAsB,EACtB,cAAuB;IAEvB,OAAO,EAAE,CAAA;AACX,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAU,EACV,UAAkB,EAClB,OAAe,EACf,UAAsB,EACtB,IAAc,EACd,MAAc,EACd,cAAsB,EACtB,MAAqB,EACrB,cAAuB,EACvB,eAAsC,EACtC,OAA8B;IAE9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,CAAA;IACtG,MAAM,QAAQ,GACZ,eAAe;QACf,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC3B,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC5F,MAAM,MAAM,GACV,GAAG,KAAK,OAAO;QACb,CAAC,CAAC,MAAM,YAAY,CAAC;YACjB,GAAG,KAAK;YACR,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,cAAc,CAAC;YACnF,aAAa,EAAE,MAAM,CAAC,kBAAkB;SACzC,CAAC;QACJ,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK;YAC7B,CAAC,CAAC,MAAM,YAAY,CAChB;gBACE,GAAG,KAAK;gBACR,GAAG;gBACH,WAAW,EACT,MAAM,CAAC,cAAc;oBACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC;aACzE,EACD,QAAQ,CACT;YACH,CAAC,CAAC,GAAG,KAAK,UAAU;gBAClB,CAAC,CAAC,MAAM,eAAe,CAAC;oBACpB,GAAG,KAAK;oBACR,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC;iBAC5D,CAAC;gBACJ,CAAC,CAAC,GAAG,KAAK,QAAQ;oBAChB,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;oBACrF,CAAC,CAAC,GAAG,KAAK,MAAM;wBACd,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC;wBAC1B,CAAC,CAAC,SAAS,CAAA;IACvB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,IAAI,SAAS;QAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG;QACV,GAAG,MAAM,CAAC,GAAG;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,oBAAoB,EAAE,GAAG;KAC1B,CAAA;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrC,OAAO;YACL,IAAI;YACJ,GAAG;YACH,GAAG,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;oBACjE,eAAe,CAAC,KAAK,CAAC,CAAA;gBACxB,CAAC;wBAAS,CAAC;oBACT,IAAI,SAAS;wBAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpE,CAAC;YACH,CAAC;SACF,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACjE,IAAI,SAAS;YAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAU,EACV,UAAkB,EAClB,OAA0E,EAC1E,cAAsB,EACtB,MAAqB,EACrB,MAAoB,EACpB,OAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1E,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAAE,GAA4B,EAAE,EAAE;QACjE,MAAM,SAAS,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnF,IAAI,SAAS;YAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;gBACtC,GAAG,GAAG;gBACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,oBAAoB,EAAE,GAAG;aAC1B,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS;gBAAE,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC,CAAA;IACD,MAAM,MAAM,GACV,GAAG,KAAK,OAAO;QACb,CAAC,CAAC,MAAM,aAAa,CACjB,UAAU,EACV,GAAG,EACH,KAAK,EACL,kBAAkB,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,EACtF,MAAM,CAAC,kBAAkB,EACzB,EAAE,MAAM,EAAE,CACX;QACH,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK;YAC7B,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE;gBAC/C,WAAW,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc;gBACpD,MAAM;aACP,CAAC;YACJ,CAAC,CAAC,GAAG,KAAK,UAAU;gBAClB,CAAC,CAAC,MAAM,gBAAgB,CACpB,UAAU,EACV,GAAG,EACH,KAAK,EACL,qBAAqB,CAAC,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,EAC9D,KAAK,EACL,EAAE,MAAM,EAAE,CACX;gBACH,CAAC,CAAC,GAAG,KAAK,QAAQ;oBAChB,CAAC,CAAC,MAAM,cAAc,CAClB,UAAU,EACV,GAAG,EACH,KAAK,EACL,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc,EAAE,CAAC,EAC3F,EAAE,MAAM,EAAE,OAAO,EAAE,CACpB;oBACH,CAAC,CAAC,GAAG,KAAK,MAAM;wBACd,CAAC,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC;wBACxD,CAAC,CAAC,SAAS,CAAA;IACvB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;IACtC,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,eAAe,CAAC,KAAK,CAAC,CAAA;IACtB,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,OAAO,MAAM,CAAA;AACf,CAAC"}

package/lib/types/host/first-party-account-context.d.ts

@@ -0,0 +1,26 @@
+import type { AccountAction } from '../shared/accounts.ts';
+/** Native login keeps the same auth store and a private work directory/database. */
+export declare function prepareMimoAccountTerminal(executable: string, action: AccountAction, stateDirectory: string, signal: AbortSignal, options?: {
+    platform?: NodeJS.Platform;
+}): Promise<{
+    argv: string[];
+    cwd: string;
+    env: {
+        MIMOCODE_DISABLE_PROJECT_CONFIG: string;
+        MIMOCODE_DISABLE_GIT: string;
+        MIMOCODE_MIMO_ONLY: string;
+        MIMOCODE_TEST_MANAGED_CONFIG_DIR: string;
+        MIMOCODE_TUI_CONFIG: string;
+        MIMOCODE_PLUGIN_META_FILE: string;
+        MIMOCODE_WORKSPACE_ID: string;
+        MIMOCODE_DB: string;
+        XDG_DATA_HOME?: string | undefined;
+        XDG_CONFIG_HOME?: string | undefined;
+        XDG_CACHE_HOME?: string | undefined;
+        XDG_STATE_HOME?: string | undefined;
+        HOME: string;
+        USERPROFILE: string;
+        MIMOCODE_HOME: string;
+    };
+    cleanup: () => Promise<void>;
+}>;

package/lib/types/host/first-party-account-context.js

@@ -0,0 +1,55 @@
+import { mkdir, mkdtemp, rm, symlink } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { firstPartyEnvironment } from "./first-party-models.js";
+import { assertMimoAccountConfiguration, mimoConfigurationPaths } from "./mimo-configuration.js";
+/** Native login keeps the same auth store and a private work directory/database. */
+export async function prepareMimoAccountTerminal(executable, action, stateDirectory, signal, options = {}) {
+    await assertMimoAccountConfiguration(signal);
+    const { home, config, data } = mimoConfigurationPaths();
+    const direct = (options.platform ?? process.platform) === 'win32';
+    const parent = join(stateDirectory, 'account-contexts', 'mimo');
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    const root = await mkdtemp(join(parent, 'login-'));
+    try {
+        for (const directory of ['home', 'config', 'data', 'cache', 'state', 'work', 'managed'])
+            await mkdir(join(root, directory), { mode: 0o700 });
+        // Windows uses the real native path directly: a symlink needs privileges and an auth
+        // copy can restore an account after logout. Other platforms retain the verified link.
+        await mkdir(data, { recursive: true, mode: 0o700 });
+        if (!direct)
+            await symlink(join(data, 'auth.json'), join(root, 'data', 'auth.json'));
+        signal.throwIfAborted();
+        return {
+            argv: [executable, ...(action === 'manage' ? [] : ['auth', action])],
+            cwd: join(root, 'work'),
+            env: {
+                ...firstPartyEnvironment('mimo'),
+                HOME: direct ? home : join(root, 'home'),
+                USERPROFILE: direct ? process.env.USERPROFILE || home : join(root, 'home'),
+                MIMOCODE_HOME: direct ? process.env.MIMOCODE_HOME || '' : root,
+                ...(direct
+                    ? {
+                        XDG_DATA_HOME: process.env.XDG_DATA_HOME || dirname(data),
+                        XDG_CONFIG_HOME: process.env.XDG_CONFIG_HOME || dirname(config),
+                        XDG_CACHE_HOME: join(root, 'cache'),
+                        XDG_STATE_HOME: join(root, 'state'),
+                    }
+                    : {}),
+                MIMOCODE_DISABLE_PROJECT_CONFIG: '1',
+                MIMOCODE_DISABLE_GIT: '1',
+                MIMOCODE_MIMO_ONLY: '1',
+                MIMOCODE_TEST_MANAGED_CONFIG_DIR: join(root, 'managed'),
+                MIMOCODE_TUI_CONFIG: '',
+                MIMOCODE_PLUGIN_META_FILE: '',
+                MIMOCODE_WORKSPACE_ID: '',
+                MIMOCODE_DB: join(root, 'data', 'mimocode.db'),
+            },
+            cleanup: () => rm(root, { recursive: true, force: true }),
+        };
+    }
+    catch (error) {
+        await rm(root, { recursive: true, force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=first-party-account-context.js.map

package/lib/types/host/first-party-account-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-account-context.js","sourceRoot":"","sources":["../../../src/host/first-party-account-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhG,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAkB,EAClB,MAAqB,EACrB,cAAsB,EACtB,MAAmB,EACnB,UAA0C,EAAE;IAE5C,MAAM,8BAA8B,CAAC,MAAM,CAAC,CAAA;IAC5C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,EAAE,CAAA;IACvD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAA;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAA;IAC/D,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IAClD,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;YACrF,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrD,qFAAqF;QACrF,sFAAsF;QACtF,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO;YACL,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACvB,GAAG,EAAE;gBACH,GAAG,qBAAqB,CAAC,MAAM,CAAC;gBAChC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBACxC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBAC1E,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC9D,GAAG,CAAC,MAAM;oBACR,CAAC,CAAC;wBACE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;wBACzD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;wBAC/D,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;wBACnC,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;qBACpC;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,+BAA+B,EAAE,GAAG;gBACpC,oBAAoB,EAAE,GAAG;gBACzB,kBAAkB,EAAE,GAAG;gBACvB,gCAAgC,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;gBACvD,mBAAmB,EAAE,EAAE;gBACvB,yBAAyB,EAAE,EAAE;gBAC7B,qBAAqB,EAAE,EAAE;gBACzB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC;aAC/C;YACD,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC1D,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/lib/types/host/first-party-models.d.ts

@@ -0,0 +1,29 @@
+import { type ModelChoice } from '../shared/types.ts';
+import { probeAccountModels, type AccountModelInput } from './account-models.mjs';
+export { MimoConfigurationError } from './mimo-configuration.ts';
+type Capture = (argv: string[], env?: Record<string, string>) => Promise<string>;
+/** Private material only. Never return this structure through Gateway or persist it. */
+export interface FirstPartyModelSource extends AccountModelInput {
+    sourceIds: string[];
+    claudeRoute?: 'proxy' | 'api';
+    nativeFullModelIds?: boolean;
+    nativeModels: {
+        remoteId: string;
+        choice: ModelChoice;
+    }[];
+}
+export declare function readFirstPartyJson(path: string): Promise<Record<string, any>>;
+/** Current Claude native managed-file location; Windows no longer reads ProgramData. */
+export declare function claudeManagedSettingsPath(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): string;
+/** Disable inherited SDK credentials and cross-CLI plugin imports in the native MiMo provider resolver. */
+export declare function firstPartyEnvironment(cli: string): Record<string, string>;
+export declare function assertFirstPartyConfiguration(cli: string, project: string, signal: AbortSignal): Promise<void>;
+export declare function parseKimiModelSources(raw: unknown, sourceId: string): FirstPartyModelSource[];
+/** MiMo's verbose records are capability metadata, not an account allow-list. */
+export declare function parseMimoModelRecords(output: string): Record<string, any>[];
+export declare function mimoModelSources(raw: Record<string, any>[], config: Record<string, any>, auth: Record<string, any>, sourceId: string, ownInline?: Record<string, {
+    key: string;
+    sourceId: string;
+}>): FirstPartyModelSource[];
+export declare function readFirstPartyModelSources(cli: 'kimi' | 'claude' | 'mimo', executable: string, project: string, capture: Capture, signal: AbortSignal): Promise<FirstPartyModelSource[]>;
+export declare function discoverFirstPartySources(sources: FirstPartyModelSource[], signal: AbortSignal, options?: Parameters<typeof probeAccountModels>[1]): Promise<ModelChoice[]>;